[Oisf-users] Adding fields to Suricata EVE file?

Champ Clark III cclark at quadrantsec.com
Mon Sep 23 16:55:07 UTC 2019


Is it possible to add a field to the Suricata EVE file without code modifications? For example, let's say I want to add an EVE field of "sensor_location" with a value of "Jacksonville_Florida", how would I do this? 

Thank you! 


- Champ Clark III 
cclark at quadrantsec.com 
o: 800-538-9357 ext. 101 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20190923/f157d3e6/attachment.html>


More information about the Oisf-users mailing list